Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: 8+vqT6QDiiIME3NLDh8lxGKJt4MX+bVHWrVGXJ28FgU=
Subject key identifier: 84:47:BA:8F:2E:91:D2:8B:35:8D:1B:6A:4B:01:3B:9F:55:AD:50:DE
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019D98F488783ECC77AD440A37E39892E732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 0984
Signing time: Fri 17 Apr 2026 01:00:55 +0000
Manifest this update: Fri 17 Apr 2026 01:00:55 +0000
Manifest next update: Sat 18 Apr 2026 01:00:55 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: s0bIMQiq3oJMz1E396YyMrWxIckzc5IA7KO+/woSP3Y=)
2: e_OqWACnyi2Gw8DMbR4NWVTK1DE.roa (hash: Ya8bGHns04cHwjGPb8IJhQNI3VXum/7q6BwWLFTuZIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:88:78:3e:cc:77:ad:44:0a:37:e3:98:92:e7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Apr 17 01:00:55 2026 GMT
Not After : Apr 18 01:00:55 2026 GMT
Subject: CN=8447ba8f2e91d28b358d1b6a4b013b9f55ad50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:f2:0b:91:a3:56:54:18:3d:21:5f:36:9e:
44:1a:82:0b:d6:4b:e8:00:14:04:2f:86:72:a7:b4:
0d:ce:35:73:66:99:07:d4:43:e8:f3:73:d0:cf:f7:
06:da:de:fb:ab:1c:fa:f6:dc:82:e4:54:88:84:79:
29:ae:24:d7:a4:dd:f5:14:18:4d:8b:38:9b:e6:2d:
55:d5:a9:79:6f:97:16:7b:83:9f:9e:e8:40:79:98:
49:45:a3:57:8e:b0:72:39:60:43:85:c0:36:13:99:
99:69:7c:f1:5c:31:31:13:3c:94:7e:2e:cb:d4:74:
ec:18:19:7c:08:96:9a:f0:2f:31:e3:69:18:5d:fd:
85:e5:4f:d5:ad:f0:d3:b3:f7:26:4d:14:21:5f:ad:
ec:4e:4e:fb:4e:cb:57:81:3b:c7:86:f1:a5:81:da:
a2:30:ac:4b:db:71:71:42:5e:36:8f:50:7b:1d:43:
6c:42:68:e4:59:e4:01:19:12:c7:3b:52:4a:50:ad:
f5:0c:23:5f:1b:a0:67:72:e5:5b:d2:4c:6e:dc:4b:
42:d6:8d:51:42:77:8a:cf:59:70:6c:8a:91:12:e0:
89:7c:65:bc:6d:b6:20:48:c9:84:3c:51:64:ce:6f:
1b:35:a4:a1:54:b1:f8:5c:c6:9b:10:26:91:87:3b:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:BA:8F:2E:91:D2:8B:35:8D:1B:6A:4B:01:3B:9F:55:AD:50:DE
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:73:20:b5:50:11:31:59:cf:f5:2b:93:e3:04:80:d7:3a:e0:
da:02:7f:0e:cb:72:3a:3a:a7:12:f3:95:58:6d:bc:80:94:63:
de:10:f3:5b:f4:ea:0b:e3:97:e2:96:82:3d:a9:7d:69:ff:20:
dc:65:72:6b:8f:da:ad:cd:dd:b4:52:36:47:0d:bb:d4:c9:75:
dc:96:6e:b8:4a:34:e2:19:5f:fc:24:ce:27:a1:f7:05:70:d6:
21:af:29:4e:2b:b2:2c:37:af:27:61:42:a3:43:92:a8:f9:21:
f4:af:33:e5:27:37:79:db:c3:ce:02:0e:4a:e9:5c:2f:ea:83:
f2:c2:54:fe:33:86:8e:af:ed:b2:f8:5e:89:30:92:e7:f1:98:
e8:6e:9e:c7:08:fa:14:8c:86:c6:74:8b:d1:ee:49:ff:23:73:
9f:fb:29:a1:87:28:8a:08:7a:7e:fd:08:14:57:d7:d7:50:74:
94:1b:a0:5c:33:b7:34:60:79:5b:d3:69:46:36:97:44:ba:4d:
53:1d:fb:d8:ac:4d:c1:c1:e8:b4:23:f3:22:d3:e2:c0:4a:85:
f3:91:19:9c:93:66:15:a9:4d:e3:f3:fd:de:02:24:97:a1:d7:
5e:0c:7b:0c:f2:8c:b8:a7:ff:7d:e5:90:5d:29:01:dd:e4:66:
10:0b:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:01 2026 by rpki-client